Birmingham mumbai

Setting a password policy
Next, we should discuss setting a password policy. After all, forcing your users to 
change their passwords does little good if they change it to something simple, such 
as 
abc123
. A password policy allows you to force requirements on your users for 
things such as length, complexity, and so on.
To facilitate this, we have 
Pluggable Authentication Module
 (
PAM
) at our disposal. 
PAM gives us additional functionality and control over the process of authentication, 
and also provides additional plugins we can use to extend authentication and add 
additional features. Although a full walkthrough of PAM is beyond the scope of this 
book, I recommend keeping it fresh in your mind in case you want to add additional 
features later.
Specific to the subject of setting up a password policy, we can install a PAM module 
to enable this, which involves installing a new package:
sudo apt install libpam-cracklib

---

Managing Users and Permissions